Security Awareness Training (SAT) - The HCQIS program During onboarding and before access to any HCQIS system or application each user must complete proper training requirements on an annual basis and must provide evidence of completion to his/her respective Security Point of Contact (SPOC) who will track all required training within the organization. Note: In most cases, an annual attestation is also provided to the CMS COR as a deliverable. Contact your COR for specific contract deliverables and dates.Security Awareness TrainingThe HCQIS system ) utilizes the DoD Cyber Exchange (h ttps://public.cyber.mil/cyber-training/, a publicly accessible training library with course offerings to allow Contractors contractors to meet the CMS SAT requirements. SAT Training is broken into two (2) separate trainings focusing on Security and Privacy. These trainings include the C : yber and Personable Privacy Training
Records Management The Department of Health and Human Services (HHS) Records Management training Training - Additional to Security Awareness training, the HHS Records Management Training is a mandatory training requirement and is outlined in the HHS Policy for Records Management and the Office of Management and Budget (OMB) and /National Archives and Records Administration (NARA) joint Directive M-19-21, Transition to Electronic Records. The purpose of this records management training is to provide an overview of employee user responsibilities for records managementhandling, help employees users tell the difference between records and non-records, and assist employees in them in learning how to manage the federal records lifecycle. Note: HHS The HHS Office of Human Capital manages Records Management records management training and requirements for CMS. Therefore, separate or updated instructions may be sent issued by HHS which to include updates to new training linksrequirements, requirements or content and should be used as underlining guidance outside of these instructionscontent or links. Please check with your COR on for any changes to these requirements. Below are the links to the websites where the three required trainings are hosted. DoD provides the links for the security trainings and are subject to change at any time. If a link is broken, you may also do a web search for the name of the training and use the appropriate search result since they are publicly available. | 
ISG Playbook
APIs
